MakeMyTrip — SSRF → XSS

Executing in origin: